$ rpki-client -vvf rpki.cernet.net/repo/cernet/0/AS144501.roa File: AS144501.roa (raw, json) Hash identifier: oZSW2VeQlYd3PogHQo/jfFbhOtNurKcr5RSixoBUfuA= Subject key identifier: 31:DF:C0:4C:E1:C2:D1:0F:6B:0E:A7:40:BA:BA:13:AB:B4:14:F9:70 Certificate issuer: /CN=A91E5D610001/serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Certificate serial: 488EE374C34F6BE92499D8BAACA2D895468B008E Authority key identifier: 05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject info access: rsync://rpki.cernet.net/repo/cernet/0/AS144501.roa Signing time: Wed 04 Mar 2026 06:14:58 +0000 ROA not before: Wed 04 Mar 2026 06:09:58 +0000 ROA not after: Wed 03 Mar 2027 06:14:58 +0000 asID: 144501 IP address blocks: 240a:a73b::/32 maxlen: 32 Validation: OK Signature path: rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8e:e3:74:c3:4f:6b:e9:24:99:d8:ba:ac:a2:d8:95:46:8b:00:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91E5D610001, serialNumber=05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA Validity Not Before: Mar 4 06:09:58 2026 GMT Not After : Mar 3 06:14:58 2027 GMT Subject: CN=31DFC04CE1C2D10F6B0EA740BABA13ABB414F970 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:05:77:0a:6b:9f:77:a6:d8:84:16:fc:8b:69: df:8f:d0:32:19:8e:b9:e4:9b:ad:25:96:38:a1:81: d6:c0:12:ed:ac:19:0a:07:fc:9c:bd:13:59:e8:91: a5:92:94:29:70:4f:01:39:73:37:d4:6c:4f:6b:58: 87:34:d2:4a:85:a9:71:3f:cc:31:91:8e:61:90:7e: 6e:c1:f7:34:fe:c5:1c:45:96:89:79:3a:48:0e:ee: f6:2a:02:79:b0:e3:6a:17:dd:23:05:1e:97:0f:21: e3:6b:88:90:8d:01:f6:93:a5:2d:19:c0:74:75:51: 78:67:16:13:c6:67:a1:6d:43:d7:c5:7e:1b:a7:98: 54:27:64:b9:3e:00:63:69:8e:97:71:62:4f:68:9d: a1:78:d4:70:28:fd:ea:b0:b7:ea:60:93:7c:4c:a1: 55:11:46:d2:8d:4d:82:4b:5f:04:77:6c:e5:38:27: ca:41:a0:b3:81:57:82:83:26:bf:a6:81:73:40:e9: cb:40:a6:c6:25:46:d3:38:fb:04:c3:53:18:93:86: be:bc:38:9a:5c:79:60:af:dd:38:4c:31:8c:4b:e8: f9:d8:10:99:0f:9d:48:12:f2:a1:b0:df:3e:74:46: 8a:c8:82:98:61:0e:ad:5e:84:81:ea:6f:b7:32:86: 81:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:DF:C0:4C:E1:C2:D1:0F:6B:0E:A7:40:BA:BA:13:AB:B4:14:F9:70 X509v3 Authority Key Identifier: keyid:05:FC:9C:5B:88:50:6F:7C:0D:3F:86:2C:88:95:BE:D6:7E:9F:8E:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.cernet.net/repo/cernet/0/05FC9C5B88506F7C0D3F862C8895BED67E9F8EBA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BfycW4hQb3wNP4YsiJW-1n6fjro.cer Subject Information Access: Signed Object - URI:rsync://rpki.cernet.net/repo/cernet/0/AS144501.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 240a:a73b::/32 Signature Algorithm: sha256WithRSAEncryption 4b:8b:05:72:98:83:19:ab:fe:c1:74:97:16:95:14:c9:ab:6f: 4e:c6:2d:5a:f5:62:f2:a3:be:60:c2:d0:86:ff:35:b3:fc:45: 0e:20:dc:2d:c1:bd:4d:92:7e:b8:b1:a8:1e:7b:45:cc:68:01: d8:57:74:37:96:a5:d3:a0:9a:a6:14:4c:f1:91:d8:3e:33:da: ec:0c:7f:ce:97:13:80:a3:f6:a8:a7:14:af:3a:22:f3:41:61: 30:e4:69:7d:be:1d:0b:80:be:e2:a2:af:95:f5:f9:ff:fa:43: 36:ce:de:ad:92:8a:78:0a:dc:de:48:1d:a4:2c:03:ec:85:df: 8a:b4:74:fc:88:66:32:5b:b7:17:1e:b3:6d:19:6a:11:4a:e1: 6e:26:90:6b:96:3a:3d:6e:cd:a2:4b:60:dc:05:97:5d:4a:d4: 96:cd:53:98:10:e3:a1:51:47:28:d0:e2:6c:ad:6f:91:f9:37: 0d:4e:1f:bd:78:28:82:c5:c6:8a:ac:9a:10:5e:f8:98:3a:d8: 07:10:2e:84:6c:f6:b4:74:14:c1:81:1f:74:f8:e9:25:9c:16: 8a:76:ed:de:4f:95:3a:89:1f:3c:03:f5:cc:02:09:60:1a:a2: 07:ed:f9:92:e1:bd:0e:ed:ed:18:c2:a7:0b:10:f7:96:ea:1f: 1b:da:e1:4b -----BEGIN CERTIFICATE----- MIIE0jCCA7qgAwIBAgIUSI7jdMNPa+kkmdi6rKLYlUaLAI4wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAwwMQTkxRTVENjEwMDAxMTEwLwYDVQQFEygwNUZDOUM1Qjg4 NTA2RjdDMEQzRjg2MkM4ODk1QkVENjdFOUY4RUJBMB4XDTI2MDMwNDA2MDk1OFoX DTI3MDMwMzA2MTQ1OFowMzExMC8GA1UEAxMoMzFERkMwNENFMUMyRDEwRjZCMEVB NzQwQkFCQTEzQUJCNDE0Rjk3MDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAKoFdwprn3em2IQW/Itp34/QMhmOueSbrSWWOKGB1sAS7awZCgf8nL0TWeiR pZKUKXBPATlzN9RsT2tYhzTSSoWpcT/MMZGOYZB+bsH3NP7FHEWWiXk6SA7u9ioC ebDjahfdIwUelw8h42uIkI0B9pOlLRnAdHVReGcWE8ZnoW1D18V+G6eYVCdkuT4A Y2mOl3FiT2idoXjUcCj96rC36mCTfEyhVRFG0o1NgktfBHds5TgnykGgs4FXgoMm v6aBc0Dpy0CmxiVG0zj7BMNTGJOGvrw4mlx5YK/dOEwxjEvo+dgQmQ+dSBLyobDf PnRGisiCmGEOrV6EgepvtzKGgb8CAwEAAaOCAcUwggHBMB0GA1UdDgQWBBQx38BM 4cLRD2sOp0C6uhOrtBT5cDAfBgNVHSMEGDAWgBQF/JxbiFBvfA0/hiyIlb7Wfp+O ujAOBgNVHQ8BAf8EBAMCB4AwYwYDVR0fBFwwWjBYoFagVIZScnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC8wNUZDOUM1Qjg4NTA2RjdDMEQzRjg2 MkM4ODk1QkVENjdFOUY4RUJBLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUH MAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFE NjYxMUUyQkI0NjhGN0M3MkZEMUZGMi9CZnljVzRoUWIzd05QNFlzaUpXLTFuNmZq cm8uY2VyME4GCCsGAQUFBwELBEIwQDA+BggrBgEFBQcwC4YycnN5bmM6Ly9ycGtp LmNlcm5ldC5uZXQvcmVwby9jZXJuZXQvMC9BUzE0NDUwMS5yb2EwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQK pzswDQYJKoZIhvcNAQELBQADggEBAEuLBXKYgxmr/sF0lxaVFMmrb07GLVr1YvKj vmDC0Ib/NbP8RQ4g3C3BvU2SfrixqB57RcxoAdhXdDeWpdOgmqYUTPGR2D4z2uwM f86XE4Cj9qinFK86IvNBYTDkaX2+HQuAvuKir5X1+f/6QzbO3q2SingK3N5IHaQs A+yF34q0dPyIZjJbtxces20ZahFK4W4mkGuWOj1uzaJLYNwFl11K1JbNU5gQ46FR RyjQ4mytb5H5Nw1OH714KILFxoqsmhBe+Jg62AcQLoRs9rR0FMGBH3T46SWcFop2 7d5PlTqJHzwD9cwCCWAaogft+ZLhvQ7t7RjCpwsQ95bqHxva4Us= -----END CERTIFICATE-----Generated at Sat Mar 28 11:41:18 2026 by rpki-client